Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: bd1CM87da7wAOF9hjYtk2+vsfxH61WNfGxHYTo/YoUk=
Subject key identifier: 2D:BB:E3:45:1E:3F:2F:2A:06:D6:54:2E:0D:A2:6B:44:8F:6D:B5:34
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019FA7BD648329F9D58879CF06E29365246E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 0276
Signing time: Tue 28 Jul 2026 08:00:34 +0000
Manifest this update: Tue 28 Jul 2026 08:00:34 +0000
Manifest next update: Wed 29 Jul 2026 08:00:34 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: L2+OwA2bGwa86CEIaWUTK1/exFIiCjDEQqP0cM5s1So=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:64:83:29:f9:d5:88:79:cf:06:e2:93:65:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Jul 28 08:00:34 2026 GMT
Not After : Jul 29 08:00:34 2026 GMT
Subject: CN=2dbbe3451e3f2f2a06d6542e0da26b448f6db534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:14:a9:79:bd:f0:84:56:3d:b1:f7:22:5b:
ce:5a:82:d9:86:cc:a6:b0:41:75:dc:7d:04:b9:da:
34:70:13:99:b3:98:30:31:e5:1f:bf:08:2d:26:99:
e5:b2:fd:c6:82:38:9c:a2:0f:a8:6a:7a:66:ac:ff:
1f:c0:2a:bc:3a:25:04:53:a4:a5:65:12:d3:10:b3:
dd:e3:f5:18:0d:b9:4f:e8:fc:69:3b:b3:5b:2a:3d:
2a:75:9b:fc:03:40:ea:27:54:f3:99:c9:7e:9e:cc:
24:bc:26:cc:08:b2:10:ba:91:c3:96:4a:54:4b:f3:
76:dd:16:8e:d6:67:e0:71:67:76:5e:ab:0b:f2:b7:
98:87:18:e6:00:4e:d4:c8:40:57:2a:05:5f:08:fc:
e4:be:55:bb:f0:30:4a:b3:fa:28:09:e3:a8:98:f6:
34:e4:21:76:db:df:71:92:7f:8b:58:93:d8:0e:d5:
c6:7e:94:91:53:a9:8c:fb:2a:4f:46:25:a0:7a:6c:
f6:17:15:a0:65:67:9f:f3:c1:2f:c0:a8:cf:8a:a0:
3e:8b:a8:e2:0f:a0:ec:09:5c:da:74:99:89:68:79:
ea:21:ad:61:ec:81:f0:a6:e8:d3:87:5b:1d:f1:02:
09:14:ea:9c:81:0d:86:fa:08:fa:2c:4f:45:0b:4c:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:E3:45:1E:3F:2F:2A:06:D6:54:2E:0D:A2:6B:44:8F:6D:B5:34
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:8c:b2:cd:99:61:b7:a6:28:2a:9c:59:c9:e7:2f:bb:cf:
0a:e5:6f:42:e3:04:d9:e2:6b:cf:d4:5e:90:16:9d:40:72:5f:
8f:b4:c1:fe:62:e9:58:d9:62:5a:c2:f4:27:e8:07:69:7f:2d:
36:43:1b:87:df:66:38:16:2a:af:31:69:15:cd:1f:4f:77:63:
32:0f:30:b3:ec:6e:2d:e7:c3:35:2c:a2:d9:b8:8d:03:99:3b:
50:cc:23:34:71:23:b1:64:8b:c1:92:68:e6:63:c0:18:c1:af:
71:57:c4:64:30:4b:7b:c5:db:85:15:ec:44:8d:5f:ea:b8:15:
86:f1:ba:7e:2d:10:b5:60:fa:9c:95:fb:c3:a1:6d:6f:17:ad:
25:87:6c:d8:06:cf:8b:75:41:88:f8:d9:3b:08:42:7f:b7:db:
56:e2:cb:91:09:28:f8:8d:6d:27:67:bf:26:e6:d1:c6:80:00:
28:d0:4f:fe:08:25:2f:6b:76:cf:62:75:db:6f:12:8b:90:d9:
f1:c2:97:d7:5b:c9:3b:c1:bf:ed:b0:7f:ab:b1:2b:4f:fa:e6:
79:aa:d1:38:55:42:f8:69:e9:97:e7:2e:24:b4:75:af:82:de:
93:2d:0f:94:21:91:21:0f:af:f9:ac:86:2d:22:e9:04:90:cb:
30:1d:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:55:50 2026 by rpki-client